--------------Boundary-00=_X65574IF9OPZK7TUOKR4
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

On Monday 03 September 2001 13:53, Matthias Hoelzer-Kluepfel wrote:
> Hi,
>
> here is the patch I promised to do to prevent HTML form attacks in
> konqueror. What the patch does is to block http post actions to some known
> ports that you don't want to be the receiver of post actions. The list of
> ports is the one from netscape (according to Dirk), with some ports added
> per advice of our security guru (imap/SSL, pop3/SSL, ftps, telnets and
> irc).
>
> Please review the patch.

Ok, let me summarize:

o The patch is basically ok as a short term solution
o A message box was rejected because of the translations
o The CUPS port should be left out

So if noone objects, I will apply the attached patch tomorrow.

Bye,
Matthias.
--------------Boundary-00=_X65574IF9OPZK7TUOKR4
Content-Type: text/x-diff;
  charset="iso-8859-1";
  name="kio-http-post.patch"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="kio-http-post.patch"
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--------------Boundary-00=_X65574IF9OPZK7TUOKR4--